Advisory about Client IP Spoofing, Race Condition and Stored Cross-Site Scripting (XSS) found on Typecho CMS.

Advisory about Remote Command Execution and Arbitrary File Write vulnerabilities found on GL.iNet routers.

Advisory about Stored Cross-Site Scripting and Insecure Direct Object References vulnerabilities found on Yellowfin.

Advisory about Path Traversal Recursive Directory Listing and Arbitrary File Copy vulnerabilities found on Tiny File Manager.